PT-2025-47583 · Unknown · Phppgadmin

Published 2025-11-17 · Updated 2025-12-18 · CVE-2025-60798

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions phpPgAdmin versions 7.13.0 and earlier

Description phpPgAdmin versions 7.13.0 and earlier contain a SQL injection issue in the display.php file at line 396. The application directly uses user-provided input from the query parameter in the $ REQUEST array within the browseQuery function without sufficient sanitization. An authenticated attacker can manipulate queries to execute arbitrary SQL commands, potentially compromising the entire database. The vulnerable parameter is query.

Recommendations Versions prior to 7.13.0 are affected. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2025-14887

CVE-2025-60798

GHSA-G6XH-WRPF-V6J6

Affected Products

Phppgadmin

References · 20

• 🔥 https://github.com/pr0wl1ng/security-advisories/blob/main/CVE-2025-60797.md · Exploit
• 🔥 https://github.com/pr0wl1ng/security-advisories/blob/main/CVE-2025-60798.md · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-60798 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-60798 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-60798 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-60798 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14887 · Security Note
• https://cve.org/CVERecord?id=CVE-2025-60798 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-60798 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-60798 · Security Note
• https://github.com/phppgadmin/phppgadmin/blob/master/display.php#L396 · Note
• https://t.me/cveNotify/143607 · Telegram Post
• https://t.me/CVEtracker/37824 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1991547898438222251 · Twitter Post
• https://reddit.com/r/VulnMatter/comments/1p5s47k/resumen_diario_de_vulnerabilidades_24112025 · Reddit Post